• Capabilities
• AppArmor
• /var/lib/docker
• cgroups
• Patched lxc-start
• Final touch-ups
• dind